Operational Governance Lead in Binfield

Position: Operational Governance Lead
Department: InfoSec
Location: London - 3 days on-site
Full Time

About this role

JET’s Information Security organisation protects a technology‑led, cloud‑native platform serving millions of customers across multiple markets. Our Security Governance function sets the standards that keep a large, cloud‑native technology organisation secure and compliant.

Responsibilities

• Maintain and operationalise JET’s security governance documentation, policies, standards, and control models keeping them aligned to JET’s risk appetite and frameworks, including NIST CSF and ISO27001.
• Run governance forums and working groups, ensuring decisions are documented, tracked, and communicated to engineering, risk, and compliance stakeholders in a timely way.
• Coordinate evidence gathering and control validation across L1 and L2, supporting audit cycles and maintaining a clear, accountable control registry.
• Draft and refine technical security standards for cloud platforms (AWS/GCP), CI/CD pipelines, and third‑party integrations, working with Engineering Leads to embed these into delivery workflows.
• Track exceptions and remediation plans with technical owners, escalating risks where needed and maintaining visibility across the Three Lines of Defence.
• Build and maintain KPI/KRI dashboards that provide stakeholders with clear, accurate visibility of control health and compliance posture.

Qualifications

• Solid hands‑on experience in Information Security GRC within a technology‑led or cloud‑first organisation, with a track record of keeping governance frameworks operational at pace.
• Working knowledge of security control frameworks (NIST CSF, ISO27001) and how they apply to modern engineering environments including cloud infrastructure, microservices, and DevOps.
• Proven ability to coordinate across the Three Lines of Defence translating audit and compliance requirements into clear, actionable tasks for engineering teams without creating unnecessary friction.
• Clear communicator who can explain governance requirements and control expectations to both technical engineers and non‑technical risk or business stakeholders.
• Organised and delivery‑focused, with the ability to manage multiple governance workstreams, track remediation through to closure, and keep processes running in a fast‑moving organisation.
• Data‑driven approach to compliance tracking, comfortable building dashboards, spotting trends in control data, and surfacing the right information to support leadership decisions.

Inclusion, Diversity & Belonging

No matter who you are, what you look like, who you love, or where you are from, you can find your place at Just Eat Takeaway.com. We’re committed to creating an inclusive culture, encouraging diversity of people and thinking, in which all employees feel they truly belong and can bring their most colourful selves to work every day.